critical9.3
CVE-2010-4154
Directory traversal vulnerability in Rhino Software, Inc.
Impact
Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rhinosoft | Ftp Voyager | through 15.2.0.11 Versions 15.0.0.0, 15.0.0.1, 15.0.0.2, 15.0.0.3, 15.1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=128654931101920&w=2
- http://packetstormsecurity.org/1010-exploits/ftpvoyager-traversal.txt
- http://secunia.com/advisories/41719
- http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_ftp_voyager.html
- http://www.osvdb.org/68607
- http://www.securityfocus.com/bid/43869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62392
- http://marc.info/?l=bugtraq&m=128654931101920&w=2
- http://packetstormsecurity.org/1010-exploits/ftpvoyager-traversal.txt
- http://secunia.com/advisories/41719
- http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_ftp_voyager.html
- http://www.osvdb.org/68607
- http://www.securityfocus.com/bid/43869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62392